Static task
static1
Behavioral task
behavioral1
Sample
63daf591a4338cdf51c53fc63b2a66e4_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
63daf591a4338cdf51c53fc63b2a66e4_JaffaCakes118
-
Size
747KB
-
MD5
63daf591a4338cdf51c53fc63b2a66e4
-
SHA1
e9c8d30554f84827229461c5e54a1c3e0c0c7f22
-
SHA256
1cf9b819c1ad4771f76ba564223d010bd1eff0f396810dd48b1e3df4eeedca50
-
SHA512
f04955f654c354ddeb4dbb339cf32c623c8f4d040272a03097248945891d1c766d9aa697ea49eeece023f0684d1411299b7fcf7513459ecb1134933e58ae100f
-
SSDEEP
12288:9LPxKAbILqltsXqtB2/p+TFKpaca5CCh0MCRbYVKNV4pH5DBoFLsZwI7PBqygAHp:9LwAbI+wXqtB2/kQacECC+pRQ7pZDBoU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 63daf591a4338cdf51c53fc63b2a66e4_JaffaCakes118
Files
-
63daf591a4338cdf51c53fc63b2a66e4_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 742KB - Virtual size: 742KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ